390917 matches found
CVE-2026-73716
A remote code execution vulnerability in the underlying operating system of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary commands as a privileged user, leading to complete compromise of the host. Exploitation requires user interaction and specific ...
CVE-2026-73715
CVE-2026-73715 affects the API component of HPE Networking Fabric Composer . An unauthenticated remote attacker can exploit this vulnerability to conduct a denial-of-service attack, disrupting the availability of the affected interface. The CVSS 3.1 score is 7.5 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:U/C:...
CVE-2026-73714
CVE-2026-73714 is an authenticated sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can access data beyond what their existing privilege level authorizes, potentially leading to further unauthorized access. ...
CVE-2026-73713
Local privilege-escalation vulnerabilities in HPE Networking Fabric Composer allow a local attacker with low privileges and no user interaction to achieve arbitrary code execution with root privileges on the underlying operating system. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ve...
CVE-2026-73712
HPE Networking Fabric Composer is affected by an unauthenticated remote code execution vulnerability in its API . If certain preconditions outside the attacker's control are met, a remote attacker can execute arbitrary commands on the underlying operating system, leading to complete system compro...
CVE-2026-73711
A privilege escalation vulnerability in the API endpoint of HPE Networking Fabric Composer allows an unauthenticated remote attacker to gain administrative privileges , resulting in complete compromise of the host. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N...
CVE-2026-73710
CVE-2026-73710 affects an API endpoint in HPE Networking Fabric Composer . An unauthenticated remote attacker can trigger a denial of service , with successful exploitation also enabling limited unauthorized modifications to the underlying operating system and disrupting system availability until...
CVE-2026-73709
HPE Networking Fabric Composer has a vulnerability in its underlying operating system that allows an unauthenticated adjacent attacker to execute arbitrary commands on the host. According to the CVELIST entry, the vulnerability is specifically tied to the installation process . Exploitation requi...
CVE-2026-73708
A business logic vulnerability in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator user to gain elevated privileges and modify settings beyond their authorized level. The CVSS 3.1 score is 8.3 (HIGH) with a network vector, low attack complexity, and low pri...
CVE-2026-73707
Privilege escalation via broken access control in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator user to perform state-changing actions that exceed their authorization level, including modifying the configuration of systems managed by the product. The CVS...
CVE-2026-73706
CVE-2026-73706 is an Authentication Bypass vulnerability in the API of HPE Networking Fabric Composer . An unauthenticated remote attacker can obtain limited system information and change the state of certain settings on a vulnerable system. Successful exploitation may expose insight into interna...
CVE-2026-73705
CVE-2026-73705 affects the API of HPE Networking Fabric Composer , where an arbitrary file write flaw allows an authenticated low-privilege operator to escalate privileges. Successful exploitation can lead to arbitrary command execution on the underlying operating system and complete compromise o...
CVE-2026-73704
A command sanitization bypass in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator to escalate to administrative access , resulting in complete system compromise. The vulnerability is classified as Authenticated Command Injection per the CVELIST record. The ...
CVE-2026-73703
CVE-2026-73703 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated adjacent attacker can inject malicious script that executes in a victim's browser within the context of the interface, requiring user in...
CVE-2026-73745
HPE Networking Fabric Composer has an unauthenticated information disclosure vulnerability in its API endpoint . A remote attacker with no prior access can view limited information handled by the system, potentially revealing details about internal services and workflows . The CNA-assigned CVSS 3...
CVE-2026-45221
Konga before 2.1.0 is vulnerable to local privilege escalation via a hardcoded OpenSSL filesystem path that does not exist in default installations. On Windows , the missing directory sits in a location writable by any authenticated local user, allowing an attacker to create it and plant maliciou...
CVE-2026-73702
CVE-2026-73702 is a privilege escalation vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can escalate permissions to those of an administrative user , resulting in complete system compromise . The vulnerability is scored CVSS 3.1: 8.8 (Hig...
CVE-2026-73701
CVE-2026-73701 is a critical unauthenticated remote code execution (RCE) vulnerability in the underlying operating system of HPE Networking Fabric Composer . The vulnerability requires certain preconditions outside the attacker's control to be met, which is reflected in the high attack complexity...
CVE-2206-18887
CVE-2206-18887 is currently a reserved candidate with no publicized technical details available in the provided documents. Affected product, root cause, and impact are not yet disclosed. Monitor for future updates once the assignee publishes details.